» Security
-
Top 5 PHP Security Mistakes
Here’s a good article on the common mistakes made by PHP programmers which leave huge security flaws in their applications. Here are the flaws mentioned in the article: Unvalidated Input Errors Access Control Fla... -
Apache Performance and Security Guide
By vinu on December 27th, 2005 | No Comments
Here’s a very good article on how to optimize performance and improve security on Apache Servers. “This guide is written mostly for web administrators/developers, who want to optimize the speed and increase ... -
phpBB exploit in the wild - PHP Security Blog
By vinu on December 26th, 2005 | No Comments
A new threat for PHPBB users. Here’s a post from the PHP Security Blog. “At Halloween 2005 I had disclosed a number of bugs in phpBB, including a remote code execution exploit through the signature_bbcode_uid... -
CryptoDox - an attempt to create a free encyclopedia on cryptography
By vinu on December 22nd, 2005 | No Comments
This is an attempt to create a free encyclopedia on cryptography. The initiative was started on 21-Dec-2005 by one of my friends Anuj Seth. The project is looking for contributions in terms of providing original (non-co... -
Top 7 PHP Security Blunders
By vinu on December 21st, 2005 | No Comments
PHP is a terrific language for the rapid development of dynamic Websites. It also has many features that are friendly to beginning programmers, such as the fact that it doesn’t require variable declarations. Howeve... -
Email Injection - SecurePHP
By vinu on December 16th, 2005 | No Comments
Another Security Tutorial for PHP, this one on Email Injection. This is how a lot of Spammers take over poorly written PHP Mailers to do their dirty work for them. There are a lot of ways to send anonymous emails, some u... -
SQL Injection Attacks by Example
By vinu on December 15th, 2005 | No Comments
This is something which every web programmer should be aware of. SQL Injection is born due to poor input filtering done by a developer. A hacker can probe around your code and try to get SQL scripts running on your serve...





